$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: pTxH/kvOWS7R9/X7Ta4RDwd0Ya64AFdNonSHEDHU1TY= Subject key identifier: DA:3F:62:9B:F4:0B:12:92:E8:BC:E5:F2:8A:55:2E:E6:4A:4B:D6:FE Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 2A6AA4063687532C03F163817C541F8CD4BADD3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 041C Signing time: Tue 24 Mar 2026 18:30:07 +0000 Manifest this update: Tue 24 Mar 2026 18:25:07 +0000 Manifest next update: Fri 27 Mar 2026 23:43:07 +0000 Files and hashes: 1: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: v+RAMds2FQMkgdNe93+Vh/vfvdhOijG7Tox6fwASCVQ=) 2: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 7+14GGdnKYA1ZHAWIx7SieKlT4Qpyh9xXAdG5rCu8fQ=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: gVPQrVQX9oWdBIjWPQSJvyIQ3AEVj+vaeGmFfblKRbs=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: gNg3pSVKH2ZGTQUKj2gYHIgoAzjmyWJ8bVXnPWnC+00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6a:a4:06:36:87:53:2c:03:f1:63:81:7c:54:1f:8c:d4:ba:dd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Mar 24 18:25:07 2026 GMT Not After : Mar 27 23:43:07 2026 GMT Subject: CN=DA3F629BF40B1292E8BCE5F28A552EE64A4BD6FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:94:cd:53:f7:b6:ab:ad:c2:63:8e:7c:d4: f0:f1:0e:16:2f:07:5b:66:7d:c9:c6:c1:90:7e:37: 15:6f:79:30:09:91:25:0f:c0:af:cb:08:90:bb:cf: 89:7b:56:d7:bc:06:14:03:10:4e:7e:38:2e:11:d4: 45:a4:3d:8a:2a:50:34:41:5b:9d:5e:dc:0e:81:79: 5c:12:95:60:dd:ac:d2:7a:54:ac:68:6c:ad:52:29: 0c:f6:7e:1d:83:ab:15:08:b9:51:92:c1:cc:57:10: 44:c9:72:1c:3f:7b:bd:3c:25:d1:68:1e:2f:14:c7: 1e:97:b6:0b:81:b3:ad:89:3b:91:b1:e8:cf:18:59: 35:58:bc:ca:1d:93:5c:7a:e6:ae:38:50:db:7d:27: 24:a8:78:8e:23:24:4f:1a:0b:16:56:b1:a8:a0:e6: da:38:9f:19:75:9c:0c:6b:23:1f:c5:0f:0e:9b:d7: 81:49:2d:ee:b2:1b:29:d5:e8:6e:a6:d6:2c:16:eb: d8:d1:7e:bf:99:76:f9:0c:a1:a9:e7:69:2e:72:0e: c7:60:b9:6f:ba:66:12:3c:e3:3e:e0:f8:e2:16:95: d9:7a:0d:99:62:43:16:44:e1:4e:d9:35:c5:cd:6a: f6:0c:06:d1:92:b0:b3:b7:a5:53:2a:cd:21:02:78: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:62:9B:F4:0B:12:92:E8:BC:E5:F2:8A:55:2E:E6:4A:4B:D6:FE X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:72:fa:70:dd:1f:f1:a1:c0:66:20:3a:a2:42:c2:92:d4:3e: 06:40:6b:b3:b9:b5:20:3f:7c:4d:9c:df:d1:6a:bd:72:c9:c7: 35:aa:38:eb:17:08:fe:0d:58:65:69:09:04:03:52:e4:ac:26: c4:09:66:27:04:03:d3:05:2a:89:a1:14:70:ba:6d:64:53:aa: 61:ab:37:18:ff:94:6e:d7:f9:66:a6:90:2b:10:7c:17:91:0c: e3:bc:dc:9b:8c:a2:94:c9:10:6c:51:a5:54:50:ae:b4:94:80: 9e:a1:46:d7:82:70:94:a9:f1:fc:7d:80:7c:15:97:1e:1c:d9: a8:5d:bf:a6:7e:94:c2:c8:86:8d:ae:8a:27:e3:be:ee:da:a3: 2b:4c:af:0a:84:af:26:e8:68:06:4e:e1:26:b0:52:05:12:10: 76:4e:1a:4d:66:23:3b:84:19:14:bc:16:0a:b0:a7:d8:44:64: c5:a1:de:83:04:4e:d3:31:06:17:c1:c3:61:48:21:39:ef:a3: 47:b6:9b:b2:d5:32:30:ac:08:67:3b:81:8e:fb:3e:67:21:ab: d9:4e:b5:d3:04:e3:ff:6e:20:16:76:e9:33:e5:7d:ae:84:c6: 5d:fb:db:2d:b9:10:3b:03:b7:41:54:ed:b6:9b:65:58:15:f4: 8b:8d:e6:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmqkBjaHUywD8WOBfFQfjNS63T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNjAzMjQxODI1MDdaFw0yNjAzMjcyMzQzMDdaMDMxMTAvBgNV BAMTKERBM0Y2MjlCRjQwQjEyOTJFOEJDRTVGMjhBNTUyRUU2NEE0QkQ2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO95TNU/e2q63CY4581PDxDhYv B1tmfcnGwZB+NxVveTAJkSUPwK/LCJC7z4l7Vte8BhQDEE5+OC4R1EWkPYoqUDRB W51e3A6BeVwSlWDdrNJ6VKxobK1SKQz2fh2DqxUIuVGSwcxXEETJchw/e708JdFo Hi8Uxx6XtguBs62JO5Gx6M8YWTVYvModk1x65q44UNt9JySoeI4jJE8aCxZWsaig 5to4nxl1nAxrIx/FDw6b14FJLe6yGynV6G6m1iwW69jRfr+ZdvkMoannaS5yDsdg uW+6ZhI84z7g+OIWldl6DZliQxZE4U7ZNcXNavYMBtGSsLO3pVMqzSECeHwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2j9im/QLEpLovOXyilUu5kpL1v4wHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVy+nDdH/GhwGYgOqJCwpLUPgZAa7O5tSA/ fE2c39FqvXLJxzWqOOsXCP4NWGVpCQQDUuSsJsQJZicEA9MFKomhFHC6bWRTqmGr Nxj/lG7X+WamkCsQfBeRDOO83JuMopTJEGxRpVRQrrSUgJ6hRteCcJSp8fx9gHwV lx4c2ahdv6Z+lMLIho2uiifjvu7aoytMrwqEryboaAZO4SawUgUSEHZOGk1mIzuE GRS8Fgqwp9hEZMWh3oMETtMxBhfBw2FIITnvo0e2m7LVMjCsCGc7gY77Pmchq9lO tdME4/9uIBZ26TPlfa6Exl372y25EDsDt0FU7babZVgV9IuN5gg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:27 2026 by rpki-client